IT Risk Lead

Federal Home Loan Bank of Indianapolis • Indianapolis, IN

1d • Hybrid

About The Position

Is it a Bank? A cooperative? A leader in affordable housing? We are all those things and more! Our core mission at FHLBank Indianapolis is to provide reliable and readily available liquidity to our member institutions to support housing finance and community development. Simply put, we’re a bank for banks, credit unions, community development financial institutions and insurers across Indiana and Michigan. We also assist in meeting the economic and housing needs of communities and families through grants and subsidized advances that support affordable housing and economic development. But enough about us, let’s talk about you. Are you looking for a company that views their employees as their greatest asset? A company that’s dedicated to making a difference in the community? So much so they pay their employees to volunteer? Do you want to join a talented workforce that prioritizes equal opportunity within an inclusive culture, and promotes learning and development, unique skills/ideas, and employee engagement? If you’ve said yes to these questions, then we might be a match! Here is what we offer: Flexible hybrid workforce model: Onsite three days a week and two days remote. We also offer remote flex days! Fantastic, competitive pay and total rewards Industry-high 401(k) match: up to 6% PLUS…an additional 4% contribution! Tuition reimbursement assistance: To help you continue to develop personally and professionally. Student loan repayment assistance: That’s right, we will help you repay outstanding student loans! Awesome Benefits Package: Medical, dental, vision benefits and even pet (you read that right) insurance! Generous time off: Vacation, paid federal holidays, birthday month floating holiday, volunteer day and summer hours program “Dress for your day” dress code: You choose the appropriate work attire based on what your day looks like. Statistics show that it is less likely for some candidates to submit their application if they don't meet all the criteria within the job description. If this is you, we encourage you to give yourself a chance and submit your application anyway, as you may be the perfect match for this role!
Purpose: The IT Risk Lead is responsible for measuring, monitoring, and evaluating the risk and control environment ensuring technology solutions are in alignment with the Bank’s risk appetite. This role will have a comprehensive understanding of the Bank’s technology operating environment to proactively identify risks, controls, issues, and changes in the risk profile of the underlying systems. The following statements are intended to describe the general nature and level of work being performed by individuals in the role. They are not intended to be an exhaustive list of all responsibilities or abilities required. The Bank reserves the right to alter or amend this description at any time.

Requirements

• Bachelor’s degree with a minimum six (6) years’ relevant IT risk, information security, compliance, or IT audit experience in a financial services environment.
• Experience with risk assessment, interpretation, analytical and collaboration skills.
• Proficient verbal and written communication skills, including the ability to effectively lead discussions and meetings.
• Ability to handle a variety of projects simultaneously.
• Technical skills experience required: control assessment, IT risk management, monitoring metrics and reporting, technical problem resolution, and project management.
• Must not have been convicted on any civil or criminal charge that would suggest a risk to Bank security.
• Ability to work full-time.
• Ability to uphold and model the Bank’s Guiding Principles.

Nice To Haves

• Master’s degree in technology, finance, or business is preferred.
• Certifications such as CISSP, CCSP, CISM, and/or CRISC are an added advantage.
• Big 4 or technology consulting experience is an added advantage.
• Experience with Azure cloud security, risk, and compliance, including knowledge of security design constructs, principles, and blueprints for application architectures.
• Active industry certifications related to cloud security, i.e., Azure Fundamentals, Azure Security Technologies etc., are an added advantage.
• Working knowledge within the following IT risk domains or technologies is an added advantage: Database, Application, Network Security, and Cloud Security, Identity and Access Management, Change Management, Threat, and Vulnerability Management.

Responsibilities

• Lead assessments based on the IT risk management framework and applicable industry best practices.
• Lead identification of technology control or process deficiencies based on established IT and Information Security standards.
• Lead IT and Information Security Risk and Control Self-Assessments to identify, assess and evaluate technology operational risk.
• Engage IT and Information Security stakeholders to support risk mitigation and effectiveness of technology controls.
• Review action plans to ensure appropriate mitigation and alignment with risk appetite.
• Review evidence for remediation plans to ensure appropriate risk mitigation.
• Monitor risk indicators and enterprise IT and Information Security metrics to assess overall technology risk profile.
• Review risk events to assess breakdown in controls, processes, and mitigation strategies.
• Assist in conducting Artificial Intelligence (AI) risk assessments in alignment with the NIST AI Risk Management Framework.
• Research IT and Information Security emerging risk trends to implement best practices to support the program.
• Coordinate implementation of process improvement changes to optimize the program.
• Monitor action plans to ensure completion of mitigation strategies within established target due date timelines.
• Collaborate with other enterprise risk management functions to support risk mitigation.
• Participate in various enterprise working groups to support continuous risk engagement.
• Assist in the preparation of IT and Information Security risk reports for the Risk Committee, and Risk Oversight Committee of the Board of Directors.
• Other risk management duties as assigned.

Benefits

• Flexible hybrid workforce model: Onsite three days a week and two days remote. We also offer remote flex days!
• Fantastic, competitive pay and total rewards
• Industry-high 401(k) match: up to 6% PLUS…an additional 4% contribution!
• Tuition reimbursement assistance: To help you continue to develop personally and professionally.
• Student loan repayment assistance: That’s right, we will help you repay outstanding student loans!
• Awesome Benefits Package: Medical, dental, vision benefits and even pet (you read that right) insurance!
• Generous time off: Vacation, paid federal holidays, birthday month floating holiday, volunteer day and summer hours program
• “Dress for your day” dress code: You choose the appropriate work attire based on what your day looks like.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level